Hi Leonid, all, +1 (binding)
Thanks for turning rc2 around so quickly and for the detailed table mapping each rc1 issue to its fix. I checked the following: - [x] Download links work. All four source tarballs and their .asc and .sha512 files download from dist/dev. - [x] GPG signatures are valid for all four artifacts, using the KEYS file at downloads.apache.org. Signing key: 9397 D9D3 BAD2 B7D4 74A1 6671 AA15 045C 6ACA 3F2B (Leonid Borchuk [email protected]). - [x] SHA512 checksums match for all four artifacts. - [x] All artifact filenames include "incubating". - [x] LICENSE, NOTICE and DISCLAIMER are present in all four archives. - [x] The core tarball matches tag 2.2.0-incubating-rc2 (commit 996d77042b621a0720ec6992def049fe1fed3ad8). The only extra content is the bundled submodules (googletest, googlebench, tabulate, yezzey) and BUILD_NUMBER. - [x] The rc1 license issues are resolved: - src/port/glob.[ch] and win32_msvc/glob.h are gone. "advertising materials" appears nowhere in the four archives, and LICENSE no longer has a BSD-4-Clause section. - The tabulate entry now names optional-lite, variant-lite and string-view-lite under Boost-1.0 and termcolor under BSD-3. It also explains the composite single_include/tabulate.hpp. licenses/LICENSE-boost.txt and licenses/LICENSE-termcolor.txt are both present. - yyjson is removed, and there are no jQuery, Sizzle or Touch Punch files left. - The NOTICE files for backup and go-libs now contain only the required notices. - There are no Thumbs.db files. - README.md has the Wassenaar / ECCN 5D002 notice, and Cloudberry is listed on apache.org/licenses/exports/ as "development and all releases / 5D002". - [x] I found no unexpected binaries. The non-text files are test fixtures (Parquet/ORC/Avro/gzip test data, plus SSL test keys and certificates). One small notes on the announcement. Neither blocks the vote: The "Release Candidate Artifacts" section says "2.2.0-rc1". It should say rc2. Best regards, Max Yang On Thu, Oct 8, 2026 at 5:41 PM Leonid Borchuk <[email protected]> wrote: > Hi all, > > I would like to call a VOTE to release Apache Cloudberry (Incubating) > 2.2.0-rc2. > > The 2.2.0-rc1 was cancelled because of License issues, see details in > https://lists.apache.org/thread/xqkkmrp9knfgnoy1pmfcqxobs0m30b5l > > In brief we fixed (it's not the whole list of fixes, but it's the list > of issues from discussion): > > > +----------------------------------+-------------------------------------------+ > | Issue raised on 2.2.0-rc1 | State in 2.2.0-rc2 > | > > +==================================+===========================================+ > | Category X BSD-4-Clause (the UC | Fixed. All three files removed. Zero > | > | advertising clause) in | "advertising materials" matches > anywhere | > | src/port/glob.c, src/port/glob.h | in the four archives, and the > | > | and win32_msvc/glob.h | BSD-4-Clause section is gone from > | > | | LICENSE. > | > > +----------------------------------+-------------------------------------------+ > | tabulate declared MIT-only | Fixed. LICENSE now carries a > Boost-1.0 | > | although it bundles Boost-1.0 | section naming optional-lite, > | > | *-lite components | variant-lite and string-view-lite > with | > | | their paths, plus > | > | | licenses/LICENSE-boost.txt. > | > > +----------------------------------+-------------------------------------------+ > | termcolor (BSD-3) bundled by | Fixed. Named under BSD-3 with > | > | tabulate and not covered | licenses/LICENSE-termcolor.txt. > | > > +----------------------------------+-------------------------------------------+ > | single_include/tabulate.hpp is a | Fixed. LICENSE says so explicitly > and | > | composite file | states which portions fall under > which | > | | licence. > | > > +----------------------------------+-------------------------------------------+ > | yyjson docs bundle jQuery, | Fixed. yyjson has been removed from > the | > | Sizzle, jQuery UI and Touch | tree entirely. > | > | Punch (dual MIT/GPLv2) | > | > > +----------------------------------+-------------------------------------------+ > | backup and go-libs NOTICE | Fixed. Both NOTICE files are now > required | > | carried the full Apache-2.0 | notices only. > | > | boilerplate | > | > > +----------------------------------+-------------------------------------------+ > | LICENSE said | Fixed (moot, yyjson removed). > | > | dependencies/yyjson; the path | > | > | was dependency/yyjson | > | > > +----------------------------------+-------------------------------------------+ > | Three Thumbs.db files in the | Fixed. None present. > | > | core archive | > | > > +----------------------------------+-------------------------------------------+ > | No crypto export notice despite | Fixed. Cloudberry is now listed at > | > | contrib/pgcrypto, and Cloudberry | apache.org/licenses/exports/ as > | > | absent from the ASF exports page | "development and all releases / > 5D002", | > | | and README.md carries the Wassenaar > and | > | | ECCN 5D002 notice. > | > > +----------------------------------+-------------------------------------------+ > > > ## Release Candidate Artifacts > > This vote covers the source release artifacts for Apache Cloudberry > (Incubating) 2.2.0-rc1, > including the core Cloudberry project and the components > cloudberry-backup, cloudberry-pxf and cloudberry-go-libs. > > Staged release artifacts: > https://dist.apache.org/repos/dist/dev/incubator/cloudberry/2.2.0-incubating-rc2/ > > Git tag & commit for the release: > - cloudberry > https://github.com/apache/cloudberry/tree/2.2.0-incubating-rc2 > > https://github.com/apache/cloudberry/commit/996d77042b621a0720ec6992def049fe1fed3ad8 > > > - cloudberry-backup > https://github.com/apache/cloudberry-backup/tree/2.2.0-incubating-rc2 > > https://github.com/apache/cloudberry-backup/commit/bd135816570d10cf25ca660f8b13ae887475744b > > - cloudberry-pxf > https://github.com/apache/cloudberry-pxf/tree/2.2.0-incubating-rc2 > > https://github.com/apache/cloudberry-pxf/commit/1fc7e9f5f32ac1c503c642e4d8928c2415a0a3b6 > > - cloudberry-go-libs > https://github.com/apache/cloudberry-go-libs/tree/2.2.0-incubating-rc2 > > https://github.com/apache/cloudberry-go-libs/commit/0e762c961c5e6e41bfbe4e2d9fd967bff04b866a > > > KEYS file:https://downloads.apache.org/incubator/cloudberry/KEYS > > GPG signature key: 9397D9D3BAD2B7D474A16671AA15045C6ACA3F2B > > The GPG user ID(s): Leonid Borchuk <[email protected]> > > ## How to Vote > > Please review the release and cast your vote below. If you are a PPMC > member, please indicate whether your vote is binding. > Also, it is helpful to list the items you verified when casting your > vote in your reply - it shows what you vote for. > > [ ] +1 Approve the release > [ ] 0 No opinion > [ ] -1 Disapprove (please explain why) > > The vote is open for at least 72 hours and will close no earlier than > Sep 7, 2026 at 08:00 UTC. > > ## Checklist for reference: > > [ ] Download links are valid and accessible. > [ ] GPG signature is valid for the release artifact using the KEYS file. > [ ] SHA512 checksums are correct and verified. > [ ] Source release artifact filename includes "incubating". > [ ] LICENSE, NOTICE, and DISCLAIMER files exist and are accurate. > [ ] No unexpected binary files in the source release. > [ ] All source files have appropriate ASF headers (excluding generated > files and legacy files). > [ ] Build completes successfully from source with clear instructions. > > More detailed checklist, please refer to: > https://github.com/apache/cloudberry/wiki/Source-Release-Checklist > > Build/Install guides (for reference): > - cloudberry: https://cloudberry.apache.org/docs/deployment/quick-deploy > - cloudberry-pxf: > > https://github.com/apache/cloudberry-pxf/blob/2.2.0-incubating-rc2/README.md > - cloudberry-backup: > > https://github.com/apache/cloudberry-backup/blob/2.2.0-incubating-rc2/README.md > - cloudberry-go-libs: > > https://github.com/apache/cloudberry-go-libs/blob/2.2.0-incubating-rc2/README.md > > > ## GPG Signature and SHA512 checksums Verification Instructions > > Please refer to our step-by-step guide: > https://cloudberry.apache.org/releases/#verifying-releases > > ## About Convenience Binaries > > After this source release vote passes and the release is published, we > plan to provide optional convenience binaries via GitHub Releases for > easier testing. > These binaries are not part of this vote and are not ASF release artifacts. > > Thanks for reviewing and voting! > > Best, > Leonid >
